Skip to content

CodeAstro · weakness class

File and Path Handling

16 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php fil…CVE-2024-25869Codeastro · CVSS 8.8 · 19% likely

    CWE-434

  2. An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.CVE-2022-43085Codeastro · CVSS 7.2 · 1.4% likely

    CWE-434

  3. A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_vie…CVE-2025-29017Codeastro · CVSS 8.8 · 0.9% likely

    CWE-434

  4. CodeAstro POS System Profile Picture profil unrestricted uploadCVE-2023-5795CodeAstro · CVSS 6.3 · 0.9% likely

    CWE-434

  5. CodeAstro POS System Logo setting unrestricted uploadCVE-2023-5796CodeAstro · CVSS 6.3 · 0.9% likely

    CWE-434

  6. CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted uploadCVE-2024-0194CodeAstro · CVSS 6.3 · 0.7% likely

    CWE-434

  7. CodeAstro Membership Management System Add Members Tab unrestricted uploadCVE-2024-1819CodeAstro · CVSS 4.7 · 0.7% likely

    CWE-434

  8. CodeAstro Membership Management System Logo unrestricted uploadCVE-2024-1818CodeAstro · CVSS 4.7 · 0.7% likely

    CWE-434

  9. CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted uploadCVE-2024-7910CodeAstro · CVSS 4.7 · 0.6% likely

    CWE-434

  10. CodeAstro Hospital Management System his_doc_update-account.php unrestricted uploadCVE-2024-11674CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-434

  11. CodeAstro Restaurant POS System update_product.php unrestricted uploadCVE-2024-1268CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-434

  12. CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted uploadCVE-2024-11000CodeAstro · CVSS 4.7 · 0.6% likely

    CWE-434

  13. CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted uploadCVE-2024-10999CodeAstro · CVSS 4.7 · 0.6% likely

    CWE-434

  14. CodeAstro Real Estate Management System submitproperty.php unrestricted uploadCVE-2025-9942CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-434

  15. CodeAstro Real Estate Management System register.php unrestricted uploadCVE-2025-9941CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-434

  16. CodeAstro Online Job Portal update-profile.php unrestricted uploadCVE-2026-77681CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in